News Roundup

Lee Mills has published a DDEV configuration for running Umbraco on .NET 10 in containers. The setup uses DDEV's generic project model with Kestrel and Azure SQL Edge, and a fresh clone can be started with one DDEV command. For Drupal developers, the experiment shows how DDEV's local development architecture can be adapted to a non-PHP CMS while remaining a bespoke setup rather than a reusable add-on.

Mike Herchel has shared a first-hand preview of the Hyatt Regency Grand Cypress Resort ahead of DrupalCon Orlando 2027. He highlights the compact conference layout, a $259 nightly group rate without a resort fee, and plans for a Drupal community talent show. The preview gives attendees an early look at how the resort-based venue will differ from the downtown settings used for many previous DrupalCons.

The Document Foundation has published an argument connecting LibreOffice Technology with digital sovereignty. It points to open document formats, open-source licensing, independent governance, and public-sector deployments as ways to reduce dependence on individual suppliers. For Drupal, the relevance is comparative, particularly around standards, governance, interoperability, and long-term control over data and infrastructure.

Drupal architect Vincenzo Gambino has released AI Decoupled 1.0.0-alpha1 for connecting external applications to Drupal-managed AI. Configurable endpoints can use agents, assistants, or direct model access, with role controls, rate limits, and optional streaming where the selected processor supports it. The module gives headless Drupal teams a way to keep AI execution in Drupal while building interfaces in JavaScript applications, mobile apps, Python applications, or other external clients.

Performant Labs will host a live session on strategic AI-assisted Drupal development on 26 August 2026 with André Angelantoni and Ilya Lyaukin. They will cover structured planning, parallel-ready epics, implementation plans, and coding pipelines intended to support reliable and maintainable development. The session is relevant to Drupal teams considering how to move AI use from isolated coding tasks toward coordinated project delivery.

W3Techs data dated 25 August 2026 shows that about half of the Drupal sites it detects on major versions have reached end of life. Drupal.org separately recorded 640,801 Drupal core sites for the week beginning 16 August, with about 42.8% on end-of-life versions. The differing measurements show continued upgrade pressure while cautioning against combining the datasets into a single estimate of all Drupal installations.

Rybbit Analytics maintainer Allie Micka is considering Drupal submodules for embedded analytics dashboards and no-code event tracking. She says the next release will also be ready for Drupal 12, while most analytics development continues upstream in Rybbit itself. The proposed additions could help smaller teams monitor analytics inside Drupal and configure reporting without custom tracking code.

The Drupal Association has opened the 2026 Drupal Business Survey to people who run, lead, or help shape Drupal agencies and service providers. Responses will be aggregated and anonymized for a report on the state of the Drupal business ecosystem, and the survey closes on 7 September 2026. The Association plans to share highlights before DrupalCon Rotterdam 2026 and discuss the findings in a Birds of a Feather session.

Shibin Das, founder of FlowDrop, announced that Atelier CMS is now listed on Product Hunt after its public introduction in July 2026. The Drupal-based builder turns plain-language requests into editable pages, applies shared brand rules across a site, and leaves publication subject to human approval on a self-hosted installation. For Drupal users, the listing provides another place to assess and give feedback on a site-building interface that keeps content and hosting under the site owner’s control.

A11yTalks will host Enrico Bisenzi for its Inclusive Arts Gallery session on 26 August 2026. Bisenzi will present artists and ideas drawn from his 30-year teaching career in higher education for art, music, and dance. For accessibility-focused audiences, the session adds an arts and culture perspective to discussions usually centred on digital accessibility.

Drupal teams have several architecture choices once asset governance outgrows the core Media Library. Self-hosted, managed, Drupal-native, and SaaS systems can connect through remote delivery, synchronisation, or API-based models. The durable decision is where files, metadata, rights, transformations, and lifecycle authority live, not simply which product is selected.

The Drupal Security Team has marked 16 contributed projects unsupported for security reasons since 10 June 2026, including three more on 19 August. All 16 advisories use the standard Critical 16/25 unsupported-project rating while the underlying security investigations remain incomplete. Sites using the affected projects have no supported security release to install and are advised to uninstall them.

Proton surveyed 1,500 business leaders in the United Kingdom, Germany, and France and reports that 74% were concerned a US technology provider could disable access to a critical service. Although 94% reported some form of continuity plan, only 44% said they tested it regularly, while 54% said their organisations could not operate beyond one business day after losing cloud and digital services or suffering a cyberattack. For Drupal teams, the findings are relevant to identifying external dependencies and testing recovery, switching, and rollback procedures.

Drupal events scheduled from 24 to 30 August 2026 include an AI-focused meetup, DrupalCamp Colorado, and an online Code of Conduct workshop. The programmes cover AI-assisted page building, Drupal development, accessibility, inclusive design, and incident response. The week offers Drupal community members several ways to learn, meet peers, and develop practical community and technical skills.

Drupal Day Aveiro 2026 has opened session submissions for its 30 October event in Portugal. The call accepts Drupal-related sessions and workshops at beginner, intermediate, and advanced levels, with 20- and 45-minute duration options. Proposals close on 25 September 2026, and submitters must confirm they can attend in Aveiro.

Symfony released 7.4.16 and 8.1.4 on 7 August 2026 as maintenance updates. The releases fixed issues across dependency injection, HTTP handling, serialization, Doctrine integration, and messaging. For Drupal, Symfony 7.4 supports Drupal 11.4, while Symfony 8.1 was adopted on the main branch during Drupal 12 development and may be replaced by Symfony 8.2 before release.

Drupal developer Pravesh Poonia has published Layout Builder Audit, a contributed module for recording block-level changes made through core Layout Builder. It logs created, modified, moved, and deleted blocks alongside field differences and editor and layout metadata. Drupal.org currently provides only a development release and does not cover the project under its security advisory policy, which teams should consider when evaluating it.

Content Sync argues that AI-assisted creation is shifting the bottleneck for enterprise Drupal teams toward content governance. The post focuses on ownership, approvals, duplicated content, local adaptation, and deciding which version should remain authoritative across multisite estates. For Drupal organisations, the issue is whether faster production can be matched by reliable processes for maintaining shared content over time.

PHP 8.6 Beta 1 is now available for testing following its release on 13 August 2026. The milestone starts the soft feature freeze as the language moves toward general availability planned for 19 November. Drupal core is already testing against PHP 8.6, although Drupal does not yet list the version as supported for sites.

amazee.ai will host an online webinar on Shadow AI and data privacy on 16 September 2026 as part of Swiss {ai} Weeks. Martin Schlögl and Thomas Schröpfer will discuss how prompts, files, code, and business data may be retained, logged, used for model training, exposed through integrations, or reviewed by people after submission to public AI tools. For Drupal agencies and teams using public AI services, the topic raises practical questions about how company, customer, and regulated data are governed..

Scolta 1.2.0 introduces incremental indexing for Drupal sites and removes deleted nodes and translations from search immediately. The release also corrects facet counts after AI query expansion and changes how full builds run, resume, and report failures. Most sites can update normally, while custom content-gatherer code may need changes for the new resume parameter.

Bluefly.io will host Aaron Ellison for a LibreChart demonstration during its Town Hall on 21 August 2026. The event notice describes LibreChart as an open-source electronic medical record system built on Drupal CMS for medical mission clinics operating offline in resource-limited settings. The stated use case places Drupal CMS in a clinical environment where continuous internet connectivity may not be available.

Link Remediator 1.0.0-alpha1 was released on 15 August 2026 after maintainer Binquan Wang generalised functionality developed while supporting USDA-ARS work for a National Agricultural Library Drupal site. Binquan says the earlier workflow was tested in development and staging, then separated from site-specific content structures, environments and business rules for contrib. For Drupal teams, the release opens that workflow to wider testing while retaining review, dry-run, audited-write and rollback safeguards.

WordPress released version 7.0.3 on 6 August 2026 with 12 security fixes. The release addressed a high-severity pre-authentication login-screen XSS alongside stored XSS, server-side request forgery, multisite privilege escalation, and information disclosure issues. For Drupal readers, the release offers a comparison point for how another major open-source CMS backports core security fixes across older branches.

Canvas Icon Picker 1.0.0 was released on 10 August 2026 with support for Drupal 11.1 or later and Drupal 12. The module lets Canvas components replace selected string-property fields with a searchable browser backed by Drupal core’s Icon API. For component authors, it provides a visual way to choose icons from permitted core, contributed, and custom packs instead of entering identifiers as text.

Canvas Map 1.0.0 was released on 6 August 2026 with Google Maps and OpenStreetMap components for Drupal Canvas. Editors can set location, zoom, map centre, aspect ratio, an accessible name and provider-specific display options. The module is aimed at individual editorial maps, while Geofield, Leaflet and related tools remain the better fit for structured geospatial data and Views-based mapping.

The Drop Times used its August Open Town Hall to review July editorial, social-media, organisation, and event activity. Publishing volume fell from 185 pieces in June to 147 in July as routine external summaries were reduced and more attention went to original reporting, interviews, modules, governance, security, and events. The meeting also outlined media partnerships, a planned public media database, community participation around digital sovereignty, and efforts to take Drupal stories to wider audiences.

Satyam Prakash presents an accessible Drupal theming approach built around Twig, semantic HTML, and BEM for Specbee. The examples combine native interactive elements, predictable component classes, keyboard focus handling, and manual accessibility checks. The approach gives Drupal front-end developers a component-level pattern for addressing accessibility while a theme is being built.

Zoocha has described a community-first approach to responding to prospective Drupal users in a guest post for the Drupal Association. The agency recommends offering guidance before placing heavy emphasis on budgets, timelines, funding, or detailed requirements. Zoocha presents the approach as a way to carry Drupal's open-source values into commercial conversations.

Drupal core initiative coordinator Gábor Hojtsy has introduced Language Audit and Configuration Language Lock for multilingual Drupal sites. Language Audit helps administrators inspect configuration and content language state, while Configuration Language Lock applies a selected configuration language through several best-effort safeguards. Hojtsy is also seeking feedback on a Drupal core proposal for a separate configuration default language before the Drupal 12 beta requirements deadline.

Drupal core has promoted Pierre Dureau from provisional to full Frontend Framework Manager after a little more than a year in the role. The core leadership team cited his communication, leadership, and decision-making, and the provisional designation has been removed from Drupal core’s maintainer file. Full status gives Pierre the broader sign-off and commit authority Drupal governance assigns to full core committers.

Replatform Radar has published data showing high canonical-tag and strict transport-security adoption on Drupal government websites. Its measurements also show substantially lower structured-data use on Drupal than on WordPress across government and higher education. For Drupal teams, the findings identify structured markup as a clear weakness even where some infrastructure-related signals are comparatively strong.

MiDy is in public beta as a PHP tool for websites between static generators and full content management systems. It combines file-based pages and templates with optional PHP routes, a page index, and static pre-generation. For Drupal practitioners, the example shows why platform choice should follow a site's editorial and runtime requirements.

Salsa Digital reports the release of Drupal AI Context beta 4, also known as Context Control Center. The update adds taxonomy-based scoping, priority ranking, a dedicated editorial workflow, token-budget visibility, a stable document importer, and Drupal 10 compatibility fixes. Drupal teams testing AI workflows gain finer control over which context reaches agents, while Salsa Digital continues to advise against production use during the beta.

Drupal founder Dries Buytaert has argued that AI is pushing the software industry toward a business-model question long familiar to open source companies. He says cheaper code could reduce the value of paying for application access while leaving demand for deployment, security, scaling, monitoring, and reliable operation intact. For Drupal businesses, the argument connects familiar open source economics with a wider shift that AI may bring to proprietary software.

Fox Valley Drupal will host a hybrid Custom Field session with module maintainer Andy Marquis on 19 August 2026. The presentation will cover how Custom Field handles complex, repeatable, and nested data with custom field types, widgets, formatters, and single-table storage. Drupal users can attend at Fox.Build in St. Charles or join online through Zoom.

Cheppers has introduced ExperienceKit, a service combining AI page generation with a custom Drupal component system. BrandKit supplies a reviewed component library built around each client's requirements, while CampaignKit assembles page drafts only from those available components. The offering gives Drupal teams another model for combining AI-assisted page building with design-system governance and editorial review.

Unit 42 says its autonomous NOVA system found 14,090 vulnerabilities while analysing 3,915 open-source projects over two months. Most findings were outside the bug classes traditionally associated with automated fuzzing, while the research also recorded thousands of supply-chain exposures. The results matter to Drupal teams as evidence of faster vulnerability discovery across open-source software, although Unit 42 does not identify Drupal or any Drupal project among the systems it scanned.

GovCMS moved from community testing of an early Drupal 9 distribution in 2020 to completing its Drupal 11 rollout in 2026. The first Drupal 9 release was described as a bare-bones proof of concept, while the later migration covered 345 projects across almost 200 business areas and more than 120 agencies. The six-year comparison shows how Drupal version transitions have developed from early compatibility testing into coordinated platform-wide migration work for Australian government sites.

Drupal AI has outlined 2026 workflows that would connect Canvas page generation with brand context, analytics recommendations, and human review. The proposal would let editors start with briefs, PDFs, or screenshots and assemble pages from approved components while related systems supply organisational rules and performance signals. Drupal teams should distinguish the stable Canvas foundation from Context Control Center beta releases and the development-only AI Google Analytics project.

Major AI coding tools support the Agent Skills format but still differ on where skills are discovered, installed, and prioritised. Codex, Claude Code, GitHub Copilot, Gemini CLI, Laravel Boost, and Drupal's AI Best Practices tooling apply different paths and distribution rules around the shared format. Drupal now has a Composer-aware resolver for aggregating skills, while maintainers are considering whether some of that work should instead rely on broader tools such as skills.sh.

Freelock founder John Locke demonstrated Drupal Flake by creating and logging into a new Drupal site in 133 seconds. The Nix-based environment provides development tools in the local shell while Process Compose runs services including MariaDB, PHP-FPM and Nginx, although most required packages were already cached for the demonstration. The approach is intended to help Drupal contributors maintain separate environments for different branches, contributed projects and AI-assisted development work.

Drupal developer Zakaria Boudchiche has released AI Content Translator 1.0.1 for Drupal 11.1 and Drupal 12. The module translates content, taxonomy terms, and interface strings through OpenAI-compatible services while tracking its own output so human-edited translations are preserved. Drupal.org advises users of version 1.0.0 to upgrade because that package was built from an earlier pre-release commit and did not include all reviewed fixes.

HTML provides the structure and native navigation controls of web documents, while HTMX is a JavaScript library that extends HTML elements with additional request and update behaviour. It can request server-rendered markup and replace selected parts of a page without requiring every interaction to reload the full document. For Drupal teams, the approach is relevant because Drupal core is gradually adopting HTMX while continuing to support its existing AJAX system.

Jürgen Haas demonstrated how the ECA Guide supplies current documentation to an AI agent during a Drupal AI Learners Club session on 31 July 2026. The setup combines Markdown pages, a Model Context Protocol server, and an agent skill that lets the agent search the guide, retrieve plugin schemas, and validate generated workflow models. The session gives Drupal module maintainers a practical example of making documentation easier for automated tools to use.

The Drupal Association has extended its 2026 At-Large Board Election to 17 August 2026 at 23:59 UTC, according to a Drupal Slack announcement by chief technology officer Tim Hestenes Lehnen. The announcement says a Helios mail delivery outage or queue delay caused the final two reminder messages to reach some voters after the previous deadline. Eligible voters have additional time to locate their ballot and vote for the community-elected board seat.

Six Drupal community events are scheduled between 18 and 22 August 2026, including in-person activity in Germany, the United States, and India and online sessions for wider participation. The programme covers contribution work, Code of Conduct incident response, Custom Field, Drupal Canvas, front-end development, and local community meetups. Contributors can use the week for technical learning, community training, and regional networking.

Southwestern Ontario Drupal Camp has opened session submissions for its 2026 event on 23 and 24 October. Friday will centre on talks and networking at Kitchener Public Library, followed by Drupal in a Day and contribution time at Conestoga College's Waterloo campus on Saturday. The call accepts Drupal and broader web topics and encourages proposals from first-time speakers and members of underrepresented groups.